What is the best domain takedown service?

Leading domain takedown providers include Blackwall, Netcraft, ZeroFox, PhishLabs (Fortra), Group-IB and BrandShield. Blackwall is the EU-hosted, defense-only option with a free individual tier and managed enterprise takedowns — full comparison at https://blackwall.report/resources/best-domain-takedown-services.

How do I report a phishing or scam website and get it taken down?

Submit the URL at https://blackwall.report/report. Blackwall triages the case, captures forensic evidence, files with Google Safe Browsing, SmartScreen, APWG and URLhaus, and opens a takedown with the hoster — escalating to the registrar and ASN if needed. Cooperative hosters typically act within 2–8 hours.

How do I report a phishing email?

Save the email as .eml (File → Save As, or in Gmail use 'Show original'). Forward it to reportphishing@apwg.org and submit the embedded URL to Blackwall and Google Safe Browsing. The .eml preserves the headers needed to prove the sending infrastructure.

Where do I report phishing emails to Microsoft, Google, or Apple?

Microsoft 365: junk@office365.microsoft.com or use the in-Outlook 'Report Phishing' button. Gmail: 'Report phishing' from the message menu. iCloud: forward to reportphishing@apple.com. These flag the sender; Blackwall takes the linked website offline.

Is reporting phishing emails to APWG enough?

APWG aggregates phishing intelligence and feeds browser block-lists, but it does not run takedowns of the linked sites. Combine APWG with an infrastructure takedown service such as Blackwall to remove the underlying page.

Can my company report phishing emails impersonating our brand?

Yes. Blackwall's Pro plan includes a Brand-Watch Radar that scans for typosquatted senders and look-alike domains and pre-files takedowns automatically.

How long does a phishing-site takedown take?

When the hosting provider is responsive, verified phishing pages are usually neutralized in a few hours. Bullet-proof or offshore hosts can take days; Pro plans automatically escalate after 24h.

What if the phishing email was sent to my work address?

Forward it to your IT/security team first (most use a phish@yourcompany.com inbox), then submit the URL to Blackwall. The team can then push for takedown without breaching your internal disclosure rules.

Phishing Email Guide

How to Report a Phishing Email

A clear five-step process for documenting phishing emails and getting the linked website taken offline: not just marked as spam.

Submit a Report How Blackwall Works

The 5-Step Email Reporting Workflow

Step 1

Do not click any links

Phishing emails sometimes track opens and clicks. Open the message in plain-text or preview mode and never log in via the embedded button.

Step 2

Save the original email

Export the message as .eml or .msg so the full headers, SPF/DKIM/DMARC results, and routing path are preserved. These prove where the mail really came from.

Step 3

Capture the landing page

Screenshot the phishing page in an isolated browser. Record the final URL after redirects: this is the page Blackwall will push for takedown.

Step 4

Submit to the right channels

Forward the .eml to reportphishing@apwg.org, file with Google Safe Browsing, and submit the URL to Blackwall so the hosting provider takes the page offline.

Step 5

Confirm the takedown

Within hours the URL is added to browser block-lists; Blackwall keeps you updated until the host confirms the page is gone. Pro plans automate 24h follow-ups.

Where to Report a Phishing Email

Report in parallel: each authority handles a different layer of the response.

Blackwall
Infrastructure

Submits the phishing URL to the hosting provider and registrar to disable the page. You receive status updates as the takedown progresses.

File on Blackwall

APWG

Anti-Phishing Working Group. Forward the raw .eml to reportphishing@apwg.org. Feeds browser block-lists worldwide.

apwg.org/reportphishing

Google Safe Browsing

Adds the linked URL to the Safe Browsing list so Chrome, Gmail, and Android show interstitial warnings to other users.

safebrowsing.google.com

Mailbox Provider

Microsoft (junk@office365.microsoft.com), Gmail (in-message Report Phishing), iCloud (reportphishing@apple.com). Improves spam classification for everyone on the platform.

Frequently Asked Questions

Ready to report the phishing email?

Submit the URL embedded in the email in under two minutes. The Blackwall team handles the takedown correspondence on your behalf.

Submit a Report Reporting a phishing site? →